Legal
Privacy Policy
Amberkith | Last Updated: | Effective from the same date
This policy explains how Amberkith collects, uses, and protects personal information provided to us through our website and during our sessions. We are committed to handling personal data with care and in accordance with Malaysian data protection obligations under the Personal Data Protection Act 2010 (PDPA).
1. Who We Are
Amberkith is an educational facilitation service based at 9A, Jalan Cantonment, 10250 George Town, Penang, Malaysia. We offer family communication workshops and document organisation sessions. We are the data controller for personal information collected through this website and our sessions.
For privacy-related enquiries, contact us at [email protected] or by phone at +60 4 226 5384.
2. What Personal Data We Collect
We collect the following categories of personal information:
- Contact information: name, email address, phone number — provided via our enquiry form or directly during sessions.
- Session-related information: details shared voluntarily during our workshops and planning sessions, including family circumstances relevant to the session's educational purpose.
- Website usage data: via cookies and analytics tools — IP address (anonymised where possible), pages visited, browser type, and session duration.
We do not collect sensitive personal data such as financial account details, medical records, or identification documents.
3. How We Collect Data
- Through the enquiry form on our website when you contact us.
- Directly from you when you attend a session or speak with us by phone or email.
- Automatically via cookies and website analytics tools when you visit our site.
4. Legal Basis for Processing
Under the PDPA 2010 and general data processing principles, we rely on the following bases:
- Consent: when you submit an enquiry form or accept cookies on our website.
- Contractual necessity: when processing is required to carry out the session you have booked.
- Legitimate interests: for responding to enquiries and improving our services, where this does not override your rights.
5. How We Use Personal Data
- To respond to your enquiries and schedule sessions.
- To prepare session materials relevant to your family's situation.
- To send session confirmation and follow-up communications.
- To improve our website and services through anonymised analytics.
- To comply with legal obligations where applicable.
We do not use your personal data for direct marketing without explicit consent. We do not sell personal data to third parties.
6. Data Sharing
We do not share personal data with third parties except in the following limited circumstances:
- Service providers: website hosting and email delivery providers who process data on our behalf under appropriate data processing agreements.
- Analytics: anonymised or aggregated usage data may be processed by web analytics tools.
- Legal obligation: where disclosure is required by Malaysian law or a court order.
7. Data Retention
- Enquiry and contact data: retained for up to 24 months after last contact, then securely deleted.
- Session notes: retained for up to 12 months after the session, unless the client requests earlier deletion.
- Website analytics data: retained for up to 14 months in anonymised form.
8. Data Security
We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. Measures include:
- Secure, password-protected storage of session records.
- HTTPS encryption on our website.
- Restricted access to personal data — only team members who need it for their work can access it.
- Prompt response to any suspected data breach, including notification to affected individuals and the relevant authority where required.
9. Cookies
Our website uses cookies to understand how visitors use the site and to improve the experience. You can manage cookie preferences through the banner displayed on your first visit or through our Cookie Policy page, which includes controls for each cookie category.
10. Your Rights
Under the PDPA 2010 and applicable principles, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Correction: request that inaccurate data be corrected.
- Erasure: request deletion of your data, subject to legal retention requirements.
- Withdraw consent: withdraw consent for processing at any time without affecting the lawfulness of prior processing.
- Objection: object to processing based on legitimate interests.
- Complaint: lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been handled improperly.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
11. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read their policies before providing any personal information.
12. Children's Privacy
Our sessions are intended for adults (18 and over) or for families engaging on behalf of their household. We do not knowingly collect personal data directly from individuals under 18. If you believe a minor's data has been submitted without appropriate consent, please contact us so we can address it promptly.
13. Changes to This Policy
We may update this policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website after a change constitutes acceptance of the updated policy.
14. Contact
Amberkith
9A, Jalan Cantonment, 10250 George Town, Penang, Malaysia
Email: [email protected]
Phone: +60 4 226 5384